@sponson/adapters 0.0.0-stage → 0.5.0

package/dist/sigv4.js

@@ -0,0 +1,118 @@
+/**
+ * AWS Signature Version 4 (header form), without an AWS SDK: the canonical request, the string to sign, the
+ * signing key and the `Authorization` header, as specified in
+ * https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv-create-signed-request.html and checked against
+ * AWS's published test suite (sigv4.test.ts). Pure: the clock is a parameter.
+ *
+ * The generic `http` adapter signs every request of an API block that declares `auth: { aws_sigv4: … }` with it
+ * (http-adapter-auth.ts). Not supported: chunked (streaming) payloads, presigned URLs, SigV4a.
+ */
+import { createHash, createHmac } from "node:crypto";
+const ALGORITHM = "AWS4-HMAC-SHA256";
+function sha256Hex(s) {
+    return createHash("sha256").update(s).digest("hex");
+}
+function hmac(key, data) {
+    return createHmac("sha256", key).update(data, "utf8").digest();
+}
+/** RFC 3986 encoding as SigV4 wants it: unreserved characters as they are, every other UTF-8 byte as `%XX`. */
+export function uriEncode(s) {
+    return encodeURIComponent(s).replace(/[!'()*]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
+}
+function safeDecode(s) {
+    try {
+        return decodeURIComponent(s);
+    }
+    catch {
+        return s;
+    }
+}
+/**
+ * The canonical URI: each path segment encoded once (S3) or twice (every other service, as the AWS docs require),
+ * starting from the path as sent.
+ */
+export function canonicalUri(pathname, service) {
+    if (pathname === "" || pathname === "/")
+        return "/";
+    const twice = service !== "s3";
+    return pathname
+        .split("/")
+        .map((seg) => {
+        const once = uriEncode(safeDecode(seg));
+        return twice ? uriEncode(once) : once;
+    })
+        .join("/");
+}
+/** The canonical query string: every parameter encoded, sorted by name then value; `?cors` is `cors=`. */
+export function canonicalQuery(search) {
+    const raw = search.startsWith("?") ? search.slice(1) : search;
+    if (raw === "")
+        return "";
+    const pairs = raw
+        .split("&")
+        .filter((p) => p !== "")
+        .map((p) => {
+        const eq = p.indexOf("=");
+        const k = eq < 0 ? p : p.slice(0, eq);
+        const v = eq < 0 ? "" : p.slice(eq + 1);
+        return [uriEncode(safeDecode(k)), uriEncode(safeDecode(v))];
+    });
+    pairs.sort(([ak, av], [bk, bv]) => (ak < bk ? -1 : ak > bk ? 1 : av < bv ? -1 : av > bv ? 1 : 0));
+    return pairs.map(([k, v]) => `${k}=${v}`).join("&");
+}
+/** `YYYYMMDDTHHMMSSZ` */
+export function amzDate(d) {
+    return d.toISOString().replace(/[-:]/g, "").replace(/\.\d{3}/, "");
+}
+/** The headers SigV4 adds before signing: date, host-independent payload hash and session token. */
+function signingHeaders(req, creds, scope) {
+    const out = { "x-amz-date": amzDate(scope.date) };
+    if (scope.contentSha256Header !== false)
+        out["x-amz-content-sha256"] = sha256Hex(req.body);
+    if (creds.sessionToken)
+        out["x-amz-security-token"] = creds.sessionToken;
+    return out;
+}
+/** Canonical headers and the signed-headers list: names lower-cased and sorted, values trimmed, runs of spaces collapsed. */
+function canonicalHeaders(headers) {
+    const entries = Object.entries(headers)
+        .map(([k, v]) => [k.toLowerCase(), v.trim().replace(/\s+/g, " ")])
+        .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
+    return { canonical: entries.map(([k, v]) => `${k}:${v}\n`).join(""), signed: entries.map(([k]) => k).join(";") };
+}
+/** The canonical request, and the signed-headers list it names. `headers` must include `host`. */
+export function canonicalRequest(req, service) {
+    const u = new URL(req.url);
+    const { canonical, signed } = canonicalHeaders(req.headers);
+    const payload = req.headers["x-amz-content-sha256"] ?? sha256Hex(req.body);
+    return { request: [req.method.toUpperCase(), canonicalUri(u.pathname, service), canonicalQuery(u.search), canonical, signed, payload].join("\n"), signedHeaders: signed };
+}
+/** `<date>/<region>/<service>/aws4_request` */
+export function credentialScope(scope) {
+    return `${amzDate(scope.date).slice(0, 8)}/${scope.region}/${scope.service}/aws4_request`;
+}
+/** The string to sign for a canonical request. */
+export function stringToSign(canonical, scope) {
+    return [ALGORITHM, amzDate(scope.date), credentialScope(scope), sha256Hex(canonical)].join("\n");
+}
+/** The hex signature of a string to sign. */
+export function signature(secretAccessKey, scope, toSign) {
+    const day = amzDate(scope.date).slice(0, 8);
+    const key = hmac(hmac(hmac(hmac(`AWS4${secretAccessKey}`, day), scope.region), scope.service), "aws4_request");
+    return createHmac("sha256", key).update(toSign, "utf8").digest("hex");
+}
+/**
+ * Sign a request: the headers to add to it (`x-amz-date`, `x-amz-content-sha256`, `x-amz-security-token` when the
+ * credentials are temporary, and `authorization`). Every header of `req` is signed, plus `host` from the URL.
+ */
+export function signRequest(req, creds, scope) {
+    const added = signingHeaders(req, creds, scope);
+    const headers = { ...lowerKeys(req.headers), ...added, host: new URL(req.url).host };
+    const { request, signedHeaders } = canonicalRequest({ ...req, headers }, scope.service);
+    const sig = signature(creds.secretAccessKey, scope, stringToSign(request, scope));
+    return { ...added, authorization: `${ALGORITHM} Credential=${creds.accessKeyId}/${credentialScope(scope)}, SignedHeaders=${signedHeaders}, Signature=${sig}` };
+}
+function lowerKeys(h) {
+    return Object.fromEntries(Object.entries(h).filter(([k]) => k.toLowerCase() !== "authorization").map(([k, v]) => [k.toLowerCase(), v]));
+}
+//# sourceMappingURL=sigv4.js.map

package/dist/sigv4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sigv4.js","sourceRoot":"","sources":["../src/sigv4.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkCrD,MAAM,SAAS,GAAG,kBAAkB,CAAC;AAErC,SAAS,SAAS,CAAC,CAAkB;IACnC,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,IAAI,CAAC,GAAoB,EAAE,IAAY;IAC9C,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,MAAM,EAAE,CAAC;AACjE,CAAC;AAED,+GAA+G;AAC/G,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AAC5G,CAAC;AAED,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,CAAC,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,CAAC,CAAC;IACX,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,QAAgB,EAAE,OAAe;IAC5D,IAAI,QAAQ,KAAK,EAAE,IAAI,QAAQ,KAAK,GAAG;QAAE,OAAO,GAAG,CAAC;IACpD,MAAM,KAAK,GAAG,OAAO,KAAK,IAAI,CAAC;IAC/B,OAAO,QAAQ;SACZ,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACX,MAAM,IAAI,GAAG,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,OAAO,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACxC,CAAC,CAAC;SACD,IAAI,CAAC,GAAG,CAAC,CAAC;AACf,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC9D,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAC1B,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,GAAG,CAAC;SACV,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;SACvB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1B,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACtC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QACxC,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAU,CAAC;IACvE,CAAC,CAAC,CAAC;IACL,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACtD,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,OAAO,CAAC,CAAO;IAC7B,OAAO,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,oGAAoG;AACpG,SAAS,cAAc,CAAC,GAAiB,EAAE,KAAuB,EAAE,KAAiB;IACnF,MAAM,GAAG,GAA2B,EAAE,YAAY,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;IAC1E,IAAI,KAAK,CAAC,mBAAmB,KAAK,KAAK;QAAE,GAAG,CAAC,sBAAsB,CAAC,GAAG,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3F,IAAI,KAAK,CAAC,YAAY;QAAE,GAAG,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC;IACzE,OAAO,GAAG,CAAC;AACb,CAAC;AAED,6HAA6H;AAC7H,SAAS,gBAAgB,CAAC,OAA+B;IACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC;SACpC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAU,CAAC;SAC1E,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACpD,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;AACnH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,GAAiB,EAAE,OAAe;IACjE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC3B,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC,sBAAsB,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;AAC5K,CAAC;AAED,+CAA+C;AAC/C,MAAM,UAAU,eAAe,CAAC,KAAsD;IACpF,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,OAAO,eAAe,CAAC;AAC5F,CAAC;AAED,kDAAkD;AAClD,MAAM,UAAU,YAAY,CAAC,SAAiB,EAAE,KAAsD;IACpG,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACnG,CAAC;AAED,6CAA6C;AAC7C,MAAM,UAAU,SAAS,CAAC,eAAuB,EAAE,KAAsD,EAAE,MAAc;IACvH,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,eAAe,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,OAAO,CAAC,EAAE,cAAc,CAAC,CAAC;IAC/G,OAAO,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAiB,EAAE,KAAuB,EAAE,KAAiB;IACvF,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAChD,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IACrF,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,gBAAgB,CAAC,EAAE,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;IACxF,MAAM,GAAG,GAAG,SAAS,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC;IAClF,OAAO,EAAE,GAAG,KAAK,EAAE,aAAa,EAAE,GAAG,SAAS,eAAe,KAAK,CAAC,WAAW,IAAI,eAAe,CAAC,KAAK,CAAC,mBAAmB,aAAa,eAAe,GAAG,EAAE,EAAE,CAAC;AACjK,CAAC;AAED,SAAS,SAAS,CAAC,CAAyB;IAC1C,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1I,CAAC"}

package/dist/supabase.d.ts

@@ -0,0 +1,9 @@
+import { type ResourceAdapter } from "@sponson/core";
+/** The Supabase Management API's base URL. `SUPABASE_API_URL` overrides it; tests and scenarios point that at the sim. */
+export declare const SUPABASE_DEFAULT_API_URL = "https://api.supabase.com/v1";
+/**
+ * The Supabase adapter (`adapter: supabase` in a plan): op `branch` (a preview branch per scope, with its
+ * connection string as a sensitive output) and op `auth_redirect` (one URL in the project's Auth redirect
+ * allow-list). Needs `SUPABASE_ACCESS_TOKEN` and `providers.supabase.project` (the parent project's ref).
+ */
+export declare const supabaseAdapter: ResourceAdapter;

package/dist/supabase.js

@@ -0,0 +1,385 @@
+/**
+ * Supabase adapter, over the Management API (https://api.supabase.com/v1) with one personal access token.
+ *
+ *   branch         a preview branch of the project per scope (Supabase Branching): created, waited for until its
+ *                  database is up, destroyed with the scope. Its outputs are the branch's own project ref, API URL
+ *                  and database connection string (sensitive).
+ *   auth_redirect  one URL in a project's Auth redirect allow-list (`uri_allow_list`, one comma-separated
+ *                  string), the parent's or (param `project`) a branch's own: read-modify-write of that string,
+ *                  never touching entries Sponson did not add.
+ *
+ * What the code assumes about the API is numbered S1–S9 at the top of packages/sim/src/routes/supabase.ts and
+ * checked in docs/api-verification.md.
+ */
+import { setTimeout as sleep } from "node:timers/promises";
+import { SponsonError, canonicalJson, isPendingMarker, markerKind, sha256 } from "@sponson/core";
+import { ABSENT, assertNoPending, clientFor, deleteIgnoringNotFound, desiredSide, diffValue, optionalEnv, paramError, requireEnv, requireProvider, stringParam } from "./common.js";
+import { ShapeError, isProviderError, isTransient, obj, records } from "./http.js";
+const ADAPTER = "supabase";
+/** The environment Supabase reads; declared once, used by the code below and by the generated docs (`about`). */
+const ABOUT = { credentialEnv: "SUPABASE_ACCESS_TOKEN", baseUrlEnv: "SUPABASE_API_URL", title: "Supabase", category: "databases", detect: { deps: ["@supabase/"], env: ["SUPABASE_*"], files: ["supabase/config.toml", "supabase/.temp/project-ref"], dbHosts: [".supabase.co", ".supabase.com"] } };
+/** The Supabase Management API's base URL. `SUPABASE_API_URL` overrides it; tests and scenarios point that at the sim. */
+export const SUPABASE_DEFAULT_API_URL = "https://api.supabase.com/v1";
+/** How long `branch` waits for a new branch to come up unless SPONSON_SUPABASE_TIMEOUT_MS says otherwise. */
+const DEFAULT_READY_TIMEOUT_MS = 600_000;
+/** Polling starts this fast and doubles up to the cap: the sim is ready at once, a real branch takes minutes. */
+const POLL_FIRST_MS = 100;
+const POLL_MAX_MS = 5_000;
+/** Read-modify-write rounds of the allow-list before a concurrent writer is reported as a conflict. */
+const LIST_ATTEMPTS = 3;
+function client(actx) {
+    const token = requireEnv(actx.env, ABOUT.credentialEnv, ADAPTER);
+    const project = requireProvider(actx, "project", ADAPTER);
+    return { api: clientFor(actx, ADAPTER, { baseUrl: optionalEnv(actx.env, ABOUT.baseUrlEnv) ?? SUPABASE_DEFAULT_API_URL, token }), project };
+}
+const BRANCH_PREFIX = "branch:";
+function branchKey(name) {
+    return `${BRANCH_PREFIX}${name}`;
+}
+/** Identity hash: the name, the one thing the plan controls. A branch recreated under the same name shows as a new id. */
+function branchHash(name) {
+    return sha256(canonicalJson({ name }));
+}
+function branchRecord(b) {
+    return { key: branchKey(b.name), id: b.project_ref, hash: branchHash(b.name), label: `Supabase branch ${b.name}` };
+}
+/** BranchResponse items (assumptions S1, S2): `name` and `project_ref` are what the adapter consumes. */
+function parseBranches(v, what) {
+    return records(v, what, ["name", "project_ref"]).map((b) => ({ name: b.name, project_ref: b.project_ref, is_default: b.is_default === true }));
+}
+async function listBranches(c) {
+    return c.api.get(`/projects/${encodeURIComponent(c.project)}/branches`, (body) => parseBranches(body, "the branch list"));
+}
+/** The branch named `name`, refusing the project's default branch: that is the project itself, never a preview. */
+function findBranch(branches, name) {
+    const b = branches.find((x) => x.name === name);
+    if (b?.is_default)
+        throw paramError(ADAPTER, `branch \`${name}\` is the project's default branch; a supabase.branch line manages preview branches only`, "name");
+    return b;
+}
+/** BranchDetailResponse (assumptions S3, S4). */
+function parseDetail(body) {
+    const o = obj(body, "the branch detail");
+    if (typeof o.status !== "string")
+        throw new ShapeError("expected `status` to be a string");
+    if (typeof o.db_host !== "string")
+        throw new ShapeError("expected `db_host` to be a string");
+    if (typeof o.db_port !== "number")
+        throw new ShapeError("expected `db_port` to be a number");
+    const str = (v) => (typeof v === "string" && v !== "" ? v : undefined);
+    const user = str(o.db_user);
+    const pass = str(o.db_pass);
+    return { status: o.status, db_host: o.db_host, db_port: o.db_port, ...(user ? { db_user: user } : {}), ...(pass ? { db_pass: pass } : {}) };
+}
+/** The API URL of a project ref (assumption S4). */
+function apiUrl(ref) {
+    return `https://${ref}.supabase.co`;
+}
+/** Outputs known from the branch alone, before its database is up. */
+function baseOutputs(ref) {
+    return { project_ref: ref, api_url: apiUrl(ref) };
+}
+/** Every output, from a ready branch's detail. The password is percent-encoded, as a connection URI requires. */
+function readyOutputs(ref, d) {
+    if (!d.db_user || !d.db_pass) {
+        throw new SponsonError("PROVIDER_RESPONSE", `supabase: GET /branches/${ref} has no database credentials (db_user, db_pass); the access token may not be allowed to read them`, { adapter: ADAPTER, branch: ref });
+    }
+    const uri = `postgresql://${encodeURIComponent(d.db_user)}:${encodeURIComponent(d.db_pass)}@${d.db_host}:${d.db_port}/postgres`;
+    return { ...baseOutputs(ref), db_host: d.db_host, connection_string: uri };
+}
+const READY = "ACTIVE_HEALTHY";
+/** Project states a new branch does not leave by itself: waiting longer cannot help. */
+const FAILED_STATES = new Set(["INIT_FAILED", "REMOVED", "GOING_DOWN", "INACTIVE", "PAUSING", "PAUSE_FAILED", "RESTORE_FAILED"]);
+/** The detail, or null while the branch is not there yet (a 404 or a transient failure right after the create). */
+async function detailOrNull(c, ref) {
+    try {
+        return await c.api.get(`/branches/${encodeURIComponent(ref)}`, parseDetail);
+    }
+    catch (e) {
+        if (isTransient(e) || isProviderError(e, "PROVIDER_NOT_FOUND"))
+            return null;
+        throw e;
+    }
+}
+/** Wait until the branch's project is `ACTIVE_HEALTHY` and return its outputs; WAIT_TIMEOUT after the deadline. */
+async function untilReady(c, actx, b) {
+    const timeout = Number(actx.env.SPONSON_SUPABASE_TIMEOUT_MS ?? DEFAULT_READY_TIMEOUT_MS);
+    const deadline = Date.now() + timeout;
+    for (let delay = POLL_FIRST_MS;; delay = Math.min(POLL_MAX_MS, delay * 2)) {
+        const d = await detailOrNull(c, b.project_ref);
+        if (d?.status === READY)
+            return readyOutputs(b.project_ref, d);
+        if (d && FAILED_STATES.has(d.status))
+            throw new SponsonError("PROVIDER_INVALID", `supabase: branch ${b.name} (${b.project_ref}) is ${d.status} and will not come up by itself`, { adapter: ADAPTER, branch: b.project_ref, state: d.status });
+        const left = deadline - Date.now();
+        if (left <= 0)
+            throw new SponsonError("WAIT_TIMEOUT", `supabase: branch ${b.name} (${b.project_ref}) not ready after ${timeout}ms (still ${d?.status ?? "not found"}); run again to keep waiting`, { adapter: ADAPTER, branch: b.project_ref, state: d?.status ?? null });
+        actx.log(`waiting for branch ${b.name} (${d?.status ?? "not found yet"})`);
+        await sleep(Math.min(delay, left));
+    }
+}
+/** What read reports: every output once the database is up; the ref and URL alone while it is coming up. */
+async function currentOutputs(c, b) {
+    const d = await detailOrNull(c, b.project_ref);
+    return d?.status === READY ? readyOutputs(b.project_ref, d) : baseOutputs(b.project_ref);
+}
+/** After a refused create: the branch, when the refusal was "that name exists" (assumption S5); else the error. */
+async function recoverCreate(c, name, e) {
+    const refused = isProviderError(e, "PROVIDER_INVALID") && (e.details.status === 400 || e.details.status === 422);
+    if (!isProviderError(e, "PROVIDER_CONFLICT") && !refused)
+        throw e;
+    const found = findBranch(await listBranches(c), name);
+    if (!found)
+        throw e;
+    return found;
+}
+const branch = {
+    outputs: {
+        project_ref: { available: "immediate" },
+        api_url: { available: "immediate" },
+        db_host: { available: "immediate" },
+        connection_string: { available: "immediate", sensitive: true },
+    },
+    defaults(params, ctx) {
+        return { name: `sponson-${ctx.env}-${ctx.scope}`, ...params };
+    },
+    async read(actx, params) {
+        if (isPendingMarker(params.name))
+            return null;
+        const c = client(actx);
+        const name = stringParam(params, "name", ADAPTER);
+        const found = findBranch(await listBranches(c), name);
+        if (!found)
+            return null;
+        return { resources: [branchRecord(found)], outputs: await currentOutputs(c, found) };
+    },
+    diff(live, params) {
+        const name = params.name;
+        if (isPendingMarker(name))
+            return [{ key: `${BRANCH_PREFIX}(pending)`, kind: "create", label: "Supabase branch", before: ABSENT, after: desiredSide(name, false) }];
+        const key = branchKey(String(name));
+        const current = live?.resources.find((r) => r.key === key);
+        if (current)
+            return [{ key, kind: "unchanged", label: current.label ?? key }];
+        return [{ key, kind: "create", label: `Supabase branch ${String(name)}`, before: ABSENT, after: desiredSide(name, false) }];
+    },
+    async apply(actx, params, live) {
+        assertNoPending(params, ADAPTER);
+        const c = client(actx);
+        const name = stringParam(params, "name", ADAPTER);
+        const key = branchKey(name);
+        const current = live?.resources.find((r) => r.key === key);
+        // Exists: no write, but wait for it, so a run that timed out waiting finishes the job and gets the outputs.
+        if (current)
+            return { resources: live.resources, outputs: await untilReady(c, actx, { name, project_ref: current.id, is_default: false }), created: [] };
+        // Announce the create before sending it: a crash or a lost response must not orphan the branch.
+        await actx.intend([key]);
+        actx.log(`create branch ${name} of project ${c.project}`);
+        let b;
+        let created = [key];
+        try {
+            b = await c.api.post(`/projects/${encodeURIComponent(c.project)}/branches`, { branch_name: name }, (body) => parseBranches([body], "the created branch")[0]);
+        }
+        catch (e) {
+            // It exists already: someone else's, or ours from an attempt whose answer was lost. Not created by this
+            // call; the engine claims it when an earlier intent of ours named it.
+            b = await recoverCreate(c, name, e);
+            created = [];
+        }
+        return { resources: [branchRecord(b)], outputs: await untilReady(c, actx, b), created };
+    },
+    async destroy(actx, resources) {
+        const c = client(actx);
+        for (const r of resources) {
+            // Never the parent project itself, whatever a ledger says.
+            if (r.id === c.project)
+                continue;
+            await deleteIgnoringNotFound(c.api, `/branches/${encodeURIComponent(r.id)}`);
+        }
+    },
+    /** Every branch but the project's default one: anything else may be a preview branch some scope (or nobody) manages. */
+    async listScope(actx) {
+        return (await listBranches(client(actx))).filter((b) => !b.is_default).map(branchRecord);
+    },
+    /** One line per branch, naming it: the line then manages exactly that branch. */
+    adopt(resources) {
+        return resources.map((r) => {
+            const name = r.key.slice(BRANCH_PREFIX.length);
+            return { id: `db-${name}`, params: { name }, keys: [r.key] };
+        });
+    },
+};
+// ---------------------------------------------------------------------------
+// auth_redirect
+// ---------------------------------------------------------------------------
+const REDIRECT_PREFIX = "redirect:";
+function target(actx, params) {
+    const c = client(actx);
+    if (params.project === undefined || params.project === null || params.project === "")
+        return { c, explicit: false };
+    return { c: { ...c, project: stringParam(params, "project", ADAPTER) }, explicit: true };
+}
+/** `redirect:<url>` on the provider block's project; `redirect:<ref>:<url>` on a project the line names. */
+function redirectKey(url, project) {
+    return project ? `${REDIRECT_PREFIX}${project}:${url}` : `${REDIRECT_PREFIX}${url}`;
+}
+/** The id carries the project (`<ref>:<url>`; a ref has no colon), so destroy knows whose list to edit. */
+function redirectRecord(t, url) {
+    return { key: redirectKey(url, t.explicit ? t.c.project : undefined), id: `${t.c.project}:${url}`, hash: sha256(url), label: `Supabase Auth redirect ${url}` };
+}
+/** Destroy's input: the URLs to remove, grouped by project, from the records' ids. */
+function byProject(resources) {
+    const out = new Map();
+    for (const r of resources) {
+        const i = r.id.indexOf(":");
+        const project = r.id.slice(0, i);
+        out.set(project, (out.get(project) ?? new Set()).add(r.id.slice(i + 1)));
+    }
+    return out;
+}
+const AUTH_CONFIG = (c) => `/projects/${encodeURIComponent(c.project)}/config/auth`;
+/** `uri_allow_list` from the auth config (assumption S7): a nullable string; null means empty. */
+function parseAllowList(body) {
+    const v = obj(body, "the auth config").uri_allow_list;
+    if (v === null || v === undefined)
+        return "";
+    if (typeof v !== "string")
+        throw new ShapeError(`expected \`uri_allow_list\` to be a string or null, got ${typeof v}`);
+    return v;
+}
+/** The entries of an allow-list string: comma-separated, whitespace around them ignored (assumption S8). */
+function entriesOf(list) {
+    return list
+        .split(",")
+        .map((s) => s.trim())
+        .filter((s) => s !== "");
+}
+async function readAllowList(c) {
+    return c.api.get(AUTH_CONFIG(c), parseAllowList);
+}
+/**
+ * Replace the whole allow-list. PATCH carrying only `uri_allow_list` sets that one field (S7), so sending it twice
+ * is harmless: `idempotent` lets the client retry it after a dropped connection.
+ */
+async function writeAllowList(c, list) {
+    await c.api.patch(AUTH_CONFIG(c), { uri_allow_list: list }, (body) => obj(body, "the auth config"), { idempotent: true });
+}
+/** The URL param: one allow-list entry, so no comma (it would split into two) and no surrounding whitespace. */
+function urlParam(params) {
+    const url = stringParam(params, "url", ADAPTER);
+    if (url.includes(","))
+        throw paramError(ADAPTER, `url \`${url}\` contains a comma; the allow-list is comma-separated`, "url");
+    if (url.trim() !== url)
+        throw paramError(ADAPTER, "url has leading or trailing whitespace", "url");
+    return url;
+}
+function conflict(c, what) {
+    return new SponsonError("PROVIDER_CONFLICT", `supabase: the Auth allow-list of project ${c.project} changed under every one of ${LIST_ATTEMPTS} attempts to ${what}; another writer is editing it`, { adapter: ADAPTER, project: c.project });
+}
+/**
+ * Add `url` unless present: read, append, write, re-read. There is no precondition to make the write
+ * conditional (S7); Sponson's own writers are serialised by the parent lock (`lockOn`), so only a writer outside
+ * Sponson (the dashboard) can overwrite ours, and the re-read notices that and repeats the round.
+ * Returns whether this call wrote it.
+ */
+async function addEntry(c, actx, url) {
+    let wrote = false;
+    for (let attempt = 0;; attempt++) {
+        const list = await readAllowList(c);
+        if (entriesOf(list).includes(url))
+            return wrote;
+        if (attempt === LIST_ATTEMPTS)
+            throw conflict(c, `add ${url}`);
+        actx.log(`allow redirect ${url}`);
+        // Appending keeps every other entry exactly as written.
+        await writeAllowList(c, list.trim() === "" ? url : `${list.replace(/[\s,]+$/, "")},${url}`);
+        wrote = true;
+    }
+}
+/** Remove exactly `urls` (and nothing else) from the allow-list, then re-read to confirm. */
+async function removeEntries(c, actx, urls) {
+    for (let attempt = 0;; attempt++) {
+        const entries = entriesOf(await readAllowList(c));
+        if (!entries.some((u) => urls.has(u)))
+            return;
+        if (attempt === LIST_ATTEMPTS)
+            throw conflict(c, "remove entries");
+        actx.log(`remove redirects ${[...urls].filter((u) => entries.includes(u)).join(", ")}`);
+        await writeAllowList(c, entries.filter((u) => !urls.has(u)).join(","));
+    }
+}
+/**
+ * The allow-list is one field of one project's Auth config, written whole by every scope and environment that adds a
+ * URL to it: the engine serialises Sponson's writers with a lock on it (ADR 0019). Named by the project's ref only
+ * (`supabase:<ref>:auth-uri-allow-list`), never the token. Null while the project is not known yet.
+ */
+function authAllowListLock(params, provider) {
+    const explicit = params.project !== undefined && params.project !== null && params.project !== "";
+    const project = explicit ? params.project : provider.project;
+    if (typeof project !== "string" || project === "" || markerKind(project) !== null)
+        return null;
+    return `${ADAPTER}:${project}:auth-uri-allow-list`;
+}
+const auth_redirect = {
+    outputs: { url: { available: "immediate" } },
+    lockOn: authAllowListLock,
+    async read(actx, params) {
+        // The URL or the project may come from a line not applied yet: nothing to read.
+        if (isPendingMarker(params.url) || isPendingMarker(params.project))
+            return null;
+        const url = urlParam(params);
+        const t = target(actx, params);
+        if (!entriesOf(await readAllowList(t.c)).includes(url))
+            return null;
+        return { resources: [redirectRecord(t, url)], outputs: { url } };
+    },
+    diff(live, params) {
+        const { url, project } = params;
+        const pending = isPendingMarker(url) || isPendingMarker(project);
+        const key = pending ? `${REDIRECT_PREFIX}(pending)` : redirectKey(String(url), typeof project === "string" && project !== "" ? project : undefined);
+        const current = live?.resources.find((r) => r.key === key);
+        return [diffValue({ key, label: "Supabase Auth redirect", live: current, desired: url, sensitive: false, liveValue: String(url) })];
+    },
+    async apply(actx, params, live) {
+        assertNoPending(params, ADAPTER);
+        const url = urlParam(params);
+        const t = target(actx, params);
+        const record = redirectRecord(t, url);
+        if (live?.resources.some((r) => r.key === record.key))
+            return { resources: live.resources, outputs: live.outputs, created: [] };
+        await actx.intend([record.key]);
+        // Already listed (someone else's, or ours from a run whose answer was lost): not created by this call.
+        const wrote = await addEntry(t.c, actx, url);
+        const state = { resources: [record], outputs: { url } };
+        return { ...state, created: wrote ? [record.key] : [] };
+    },
+    async destroy(actx, resources) {
+        const base = client(actx);
+        for (const [project, urls] of byProject(resources)) {
+            try {
+                await removeEntries({ ...base, project }, actx, urls);
+            }
+            catch (e) {
+                // A branch's project deleted first takes its allow-list with it: already gone.
+                if (!isProviderError(e, "PROVIDER_NOT_FOUND"))
+                    throw e;
+            }
+        }
+    },
+    /** Every URL on the provider block's project's allow-list. */
+    async listScope(actx) {
+        const t = { c: client(actx), explicit: false };
+        return entriesOf(await readAllowList(t.c)).map((url) => redirectRecord(t, url));
+    },
+    /** One line per allowed URL. */
+    adopt(resources) {
+        return resources.map((r) => ({ id: "auth_redirect", params: { url: r.key.slice(REDIRECT_PREFIX.length) }, keys: [r.key] }));
+    },
+};
+/**
+ * The Supabase adapter (`adapter: supabase` in a plan): op `branch` (a preview branch per scope, with its
+ * connection string as a sensitive output) and op `auth_redirect` (one URL in the project's Auth redirect
+ * allow-list). Needs `SUPABASE_ACCESS_TOKEN` and `providers.supabase.project` (the parent project's ref).
+ */
+export const supabaseAdapter = { name: ADAPTER, ops: { branch, auth_redirect }, about: ABOUT };
+//# sourceMappingURL=supabase.js.map

package/dist/supabase.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"supabase.js","sourceRoot":"","sources":["../src/supabase.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,IAAI,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,EAAkI,MAAM,eAAe,CAAC;AACjO,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,SAAS,EAAE,sBAAsB,EAAE,WAAW,EAAE,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACpL,OAAO,EAAE,UAAU,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAkB,MAAM,WAAW,CAAC;AAEnG,MAAM,OAAO,GAAG,UAAU,CAAC;AAC3B,iHAAiH;AACjH,MAAM,KAAK,GAAG,EAAE,aAAa,EAAE,uBAAuB,EAAE,UAAU,EAAE,kBAAkB,EAAE,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,YAAY,CAAC,EAAE,GAAG,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE,CAAC,sBAAsB,EAAE,4BAA4B,CAAC,EAAE,OAAO,EAAE,CAAC,cAAc,EAAE,eAAe,CAAC,EAAE,EAAW,CAAC;AAE9S,0HAA0H;AAC1H,MAAM,CAAC,MAAM,wBAAwB,GAAG,6BAA6B,CAAC;AAEtE,6GAA6G;AAC7G,MAAM,wBAAwB,GAAG,OAAO,CAAC;AACzC,iHAAiH;AACjH,MAAM,aAAa,GAAG,GAAG,CAAC;AAC1B,MAAM,WAAW,GAAG,KAAK,CAAC;AAC1B,uGAAuG;AACvG,MAAM,aAAa,GAAG,CAAC,CAAC;AAQxB,SAAS,MAAM,CAAC,IAAoB;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,aAAa,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,eAAe,CAAC,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IAC1D,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,KAAK,CAAC,UAAU,CAAC,IAAI,wBAAwB,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC;AAC7I,CAAC;AAqBD,MAAM,aAAa,GAAG,SAAS,CAAC;AAEhC,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,GAAG,aAAa,GAAG,IAAI,EAAE,CAAC;AACnC,CAAC;AAED,0HAA0H;AAC1H,SAAS,UAAU,CAAC,IAAY;IAC9B,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,OAAO,EAAE,GAAG,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;AACrH,CAAC;AAED,yGAAyG;AACzG,SAAS,aAAa,CAAC,CAAU,EAAE,IAAY;IAC7C,OAAO,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,UAAU,EAAE,CAAC,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;AACjJ,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,CAAS;IACnC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,CAAC;AAC5H,CAAC;AAED,mHAAmH;AACnH,SAAS,UAAU,CAAC,QAAkB,EAAE,IAAY;IAClD,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,UAAU;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,YAAY,IAAI,0FAA0F,EAAE,MAAM,CAAC,CAAC;IACjK,OAAO,CAAC,CAAC;AACX,CAAC;AAED,iDAAiD;AACjD,SAAS,WAAW,CAAC,IAAa;IAChC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;IACzC,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,kCAAkC,CAAC,CAAC;IAC3F,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC7F,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,mCAAmC,CAAC,CAAC;IAC7F,MAAM,GAAG,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAChF,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAC5B,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC9I,CAAC;AAED,oDAAoD;AACpD,SAAS,MAAM,CAAC,GAAW;IACzB,OAAO,WAAW,GAAG,cAAc,CAAC;AACtC,CAAC;AAED,sEAAsE;AACtE,SAAS,WAAW,CAAC,GAAW;IAC9B,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;AACpD,CAAC;AAED,iHAAiH;AACjH,SAAS,YAAY,CAAC,GAAW,EAAE,CAAS;IAC1C,IAAI,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;QAC7B,MAAM,IAAI,YAAY,CAAC,mBAAmB,EAAE,2BAA2B,GAAG,mGAAmG,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IACpN,CAAC;IACD,MAAM,GAAG,GAAG,gBAAgB,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,OAAO,WAAW,CAAC;IAChI,OAAO,EAAE,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;AAC7E,CAAC;AAED,MAAM,KAAK,GAAG,gBAAgB,CAAC;AAC/B,wFAAwF;AACxF,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,aAAa,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,CAAC;AAEjI,mHAAmH;AACnH,KAAK,UAAU,YAAY,CAAC,CAAS,EAAE,GAAW;IAChD,IAAI,CAAC;QACH,OAAO,MAAM,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,aAAa,kBAAkB,CAAC,GAAG,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IAC9E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,WAAW,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,CAAC,EAAE,oBAAoB,CAAC;YAAE,OAAO,IAAI,CAAC;QAC5E,MAAM,CAAC,CAAC;IACV,CAAC;AACH,CAAC;AAED,mHAAmH;AACnH,KAAK,UAAU,UAAU,CAAC,CAAS,EAAE,IAAoB,EAAE,CAAS;IAClE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,2BAA2B,IAAI,wBAAwB,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC;IACtC,KAAK,IAAI,KAAK,GAAG,aAAa,GAAI,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;QAC/C,IAAI,CAAC,EAAE,MAAM,KAAK,KAAK;YAAE,OAAO,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,kBAAkB,EAAE,oBAAoB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,QAAQ,CAAC,CAAC,MAAM,iCAAiC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;QAC9O,MAAM,IAAI,GAAG,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,IAAI,IAAI,IAAI,CAAC;YAAE,MAAM,IAAI,YAAY,CAAC,cAAc,EAAE,oBAAoB,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,WAAW,qBAAqB,OAAO,aAAa,CAAC,EAAE,MAAM,IAAI,WAAW,8BAA8B,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,IAAI,IAAI,EAAE,CAAC,CAAC;QAC1Q,IAAI,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,MAAM,IAAI,eAAe,GAAG,CAAC,CAAC;QAC3E,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;AACH,CAAC;AAED,4GAA4G;AAC5G,KAAK,UAAU,cAAc,CAAC,CAAS,EAAE,CAAS;IAChD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,CAAC;IAC/C,OAAO,CAAC,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;AAC3F,CAAC;AAED,mHAAmH;AACnH,KAAK,UAAU,aAAa,CAAC,CAAS,EAAE,IAAY,EAAE,CAAU;IAC9D,MAAM,OAAO,GAAG,eAAe,CAAC,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC;IACjH,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,mBAAmB,CAAC,IAAI,CAAC,OAAO;QAAE,MAAM,CAAC,CAAC;IAClE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,KAAK;QAAE,MAAM,CAAC,CAAC;IACpB,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,MAAM,GAAW;IACrB,OAAO,EAAE;QACP,WAAW,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;QACvC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;QACnC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE;QACnC,iBAAiB,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,IAAI,EAAE;KAC/D;IAED,QAAQ,CAAC,MAAM,EAAE,GAAG;QAClB,OAAO,EAAE,IAAI,EAAE,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM;QACrB,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;QAC9C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,YAAY,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACtD,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,OAAO,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;IACvF,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,MAAM;QACf,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,IAAI,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,CAAC,EAAE,GAAG,EAAE,GAAG,aAAa,WAAW,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QACpK,MAAM,GAAG,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3D,IAAI,OAAO;YAAE,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;QAC9E,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,mBAAmB,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,WAAW,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9H,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;QAC5B,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3D,4GAA4G;QAC5G,IAAI,OAAO;YAAE,OAAO,EAAE,SAAS,EAAE,IAAK,CAAC,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAE1J,gGAAgG;QAChG,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACzB,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,eAAe,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,IAAI,CAAS,CAAC;QACd,IAAI,OAAO,GAAa,CAAC,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,EAAE,oBAAoB,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;QAChK,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,wGAAwG;YACxG,sEAAsE;YACtE,CAAC,GAAG,MAAM,aAAa,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YACpC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;QAC3B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QACvB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC1B,2DAA2D;YAC3D,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,OAAO;gBAAE,SAAS;YACjC,MAAM,sBAAsB,CAAC,CAAC,CAAC,GAAG,EAAE,aAAa,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,wHAAwH;IACxH,KAAK,CAAC,SAAS,CAAC,IAAI;QAClB,OAAO,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAC3F,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,SAAS;QACb,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;YACzB,MAAM,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YAC/C,OAAO,EAAE,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/D,CAAC,CAAC,CAAC;IACL,CAAC;CACF,CAAC;AAEF,8EAA8E;AAC9E,gBAAgB;AAChB,8EAA8E;AAE9E,MAAM,eAAe,GAAG,WAAW,CAAC;AAYpC,SAAS,MAAM,CAAC,IAAoB,EAAE,MAA+B;IACnE,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;IACvB,IAAI,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IACpH,OAAO,EAAE,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC3F,CAAC;AAED,4GAA4G;AAC5G,SAAS,WAAW,CAAC,GAAW,EAAE,OAAgB;IAChD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,eAAe,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,eAAe,GAAG,GAAG,EAAE,CAAC;AACtF,CAAC;AAED,2GAA2G;AAC3G,SAAS,cAAc,CAAC,CAAS,EAAE,GAAW;IAC5C,OAAO,EAAE,GAAG,EAAE,WAAW,CAAC,GAAG,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,GAAG,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,KAAK,EAAE,0BAA0B,GAAG,EAAE,EAAE,CAAC;AACjK,CAAC;AAED,sFAAsF;AACtF,SAAS,SAAS,CAAC,SAA2B;IAC5C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;QAC1B,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACjC,GAAG,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,aAAa,kBAAkB,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC;AAE5F,kGAAkG;AAClG,SAAS,cAAc,CAAC,IAAa;IACnC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC,cAAc,CAAC;IACtD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,MAAM,IAAI,UAAU,CAAC,2DAA2D,OAAO,CAAC,EAAE,CAAC,CAAC;IACvH,OAAO,CAAC,CAAC;AACX,CAAC;AAED,4GAA4G;AAC5G,SAAS,SAAS,CAAC,IAAY;IAC7B,OAAO,IAAI;SACR,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC7B,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,CAAS;IACpC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;AACnD,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,cAAc,CAAC,CAAS,EAAE,IAAY;IACnD,MAAM,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,iBAAiB,CAAC,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,CAAC;AAC5H,CAAC;AAED,gHAAgH;AAChH,SAAS,QAAQ,CAAC,MAA+B;IAC/C,MAAM,GAAG,GAAG,WAAW,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,SAAS,GAAG,wDAAwD,EAAE,KAAK,CAAC,CAAC;IAC9H,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,GAAG;QAAE,MAAM,UAAU,CAAC,OAAO,EAAE,wCAAwC,EAAE,KAAK,CAAC,CAAC;IACnG,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,QAAQ,CAAC,CAAS,EAAE,IAAY;IACvC,OAAO,IAAI,YAAY,CAAC,mBAAmB,EAAE,4CAA4C,CAAC,CAAC,OAAO,+BAA+B,aAAa,gBAAgB,IAAI,gCAAgC,EAAE,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;AAChP,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,QAAQ,CAAC,CAAS,EAAE,IAAoB,EAAE,GAAW;IAClE,IAAI,KAAK,GAAG,KAAK,CAAC;IAClB,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,GAAG,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC;QACpC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,OAAO,KAAK,aAAa;YAAE,MAAM,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,EAAE,CAAC,CAAC;QAC/D,IAAI,CAAC,GAAG,CAAC,kBAAkB,GAAG,EAAE,CAAC,CAAC;QAClC,wDAAwD;QACxD,MAAM,cAAc,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC5F,KAAK,GAAG,IAAI,CAAC;IACf,CAAC;AACH,CAAC;AAED,6FAA6F;AAC7F,KAAK,UAAU,aAAa,CAAC,CAAS,EAAE,IAAoB,EAAE,IAAiB;IAC7E,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;QAClC,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAE,OAAO;QAC9C,IAAI,OAAO,KAAK,aAAa;YAAE,MAAM,QAAQ,CAAC,CAAC,EAAE,gBAAgB,CAAC,CAAC;QACnE,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACxF,MAAM,cAAc,CAAC,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,MAAsB,EAAE,QAAiC;IAClF,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,CAAC,OAAO,KAAK,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,CAAC;IAClG,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;IAC7D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,IAAI,UAAU,CAAC,OAAO,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/F,OAAO,GAAG,OAAO,IAAI,OAAO,sBAAsB,CAAC;AACrD,CAAC;AAED,MAAM,aAAa,GAAW;IAC5B,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE;IAE5C,MAAM,EAAE,iBAAiB;IAEzB,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM;QACrB,gFAAgF;QAChF,IAAI,eAAe,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,IAAI,CAAC;QAChF,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,IAAI,CAAC,SAAS,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;QACpE,OAAO,EAAE,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,IAAI,CAAC,IAAI,EAAE,MAAM;QACf,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,CAAC;QAChC,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;QACjE,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,eAAe,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACpJ,MAAM,OAAO,GAAG,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC;QAC3D,OAAO,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,wBAAwB,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACtI,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI;QAC5B,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;QACtC,IAAI,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,MAAM,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAChI,MAAM,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAChC,uGAAuG;QACvG,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAc,EAAE,SAAS,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC;QACnE,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,SAAS;QAC3B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;QAC1B,KAAK,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,IAAI,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YACnD,IAAI,CAAC;gBACH,MAAM,aAAa,CAAC,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;YACxD,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,+EAA+E;gBAC/E,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,oBAAoB,CAAC;oBAAE,MAAM,CAAC,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,KAAK,CAAC,SAAS,CAAC,IAAI;QAClB,MAAM,CAAC,GAAW,EAAE,CAAC,EAAE,MAAM,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QACvD,OAAO,SAAS,CAAC,MAAM,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,cAAc,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAClF,CAAC;IAED,gCAAgC;IAChC,KAAK,CAAC,SAAS;QACb,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9H,CAAC;CACF,CAAC;AAEF;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAoB,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC"}

package/dist/vercel.d.ts

@@ -0,0 +1,8 @@
+import { type ResourceAdapter } from "@sponson/core";
+/** Vercel's API base URL; `VERCEL_API_URL` overrides it (the sim and tests use that). */
+export declare const VERCEL_DEFAULT_API_URL = "https://api.vercel.com";
+/**
+ * Vercel: op `env` manages environment variables per target and git branch; op `deploy` triggers or watches a
+ * deployment and outputs its `preview_url`. Needs `VERCEL_TOKEN` and `providers.vercel.project`.
+ */
+export declare const vercelAdapter: ResourceAdapter;